HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Southern California University of Health Sciences
bd_a44cfd69c101fa78 · schema v1 · pii pii-v1
Full breach record for Southern California University of Health Sciences →Southern California University of Health Sciences reported an external system breach (hacking) occurring March 23-24, 2026, discovered April 24, 2026. The incident affected 2,206 individuals, including 2 Maine residents. The breach involved the acquisition of personal identifiers and government IDs. The university provided written notification on May 18, 2026, and offered 12 months of identity monitoring services through Kroll.
Maine clockDiscovered Apr 24, 2026 → Filed with AG May 19, 202625d ✓ ME AG ≤30d25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_8fb33406b14e9099California State AGfiled 2026-05-19Verified by operator
- bd_6274102dfa5ded98Indiana State AGfiled 2026-05-18(1d gap)Verified by operator
- bd_b90a4f569589d9e0New Hampshire State AGfiled 2026-05-18(1d gap)Verified
- bd_c6e1f66e835a5eaaMassachusetts State AGfiled 2026-05-01(18d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6eea4b75-adc7-4213-a659-4057e79f4c2d.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2026
- Raw hash
- 22b794dfeaada1e141fb951cd4fd186c0e7304d0b1a5bfa5a473f8dadd76349b
Reporting entity
- Name
- Southern California University of Health Sciencesnorm: southern california university of health sciences
- Domain
- scuhs.edu
- Industry
- Education
Victim entity
- Name
- Southern California University of Health Sciencesnorm: southern california university of health sciences
- Domain
- scuhs.edu
- Industry
- Education
Incident
- Discovered
- Apr 24, 2026
- Materiality determined
- —
- Notification sent
- May 18, 2026
- Affected individuals
- 2,206
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 24, 2026→ Filed with AG: May 19, 202625d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.